string: Check for "nonstring" attribute on strscpy() arguments
authorKees Cook <kees@kernel.org>
Mon, 5 Aug 2024 21:43:44 +0000 (14:43 -0700)
committerKees Cook <kees@kernel.org>
Fri, 23 Aug 2024 00:04:43 +0000 (17:04 -0700)
commit559048d156ff3391c4b793779a824c9193e20442
treea05e8cf71ae1b3814c1c59f8f316beb1e9b58ebf
parent32ef4b710cbe1a8901534033872a5bc6b1618bbc
string: Check for "nonstring" attribute on strscpy() arguments

GCC already checks for arguments that are marked with the "nonstring"[1]
attribute when used on standard C String API functions (e.g. strcpy). Gain
this compile-time checking also for the kernel's primary string copying
function, strscpy().

Note that Clang has neither "nonstring" nor __builtin_has_attribute().

Link: https://gcc.gnu.org/onlinedocs/gcc/Common-Variable-Attributes.html#index-nonstring-variable-attribute
Reviewed-by: Miguel Ojeda <ojeda@kernel.org>
Tested-by: Miguel Ojeda <ojeda@kernel.org>
Link: https://lore.kernel.org/r/20240805214340.work.339-kees@kernel.org
Signed-off-by: Kees Cook <kees@kernel.org>
include/linux/compiler.h
include/linux/compiler_types.h
include/linux/string.h